Security Administrator

Envision Radiology•Colorado Springs, CO

5d•$80,560 - $100,700•Onsite

About The Position

The Security Administrator is responsible for performing the day-to-day operational activities that support Envision Radiology's enterprise cybersecurity program, including monitoring security events, investigating potential threats, and administering cybersecurity technologies. Working under the direction of the Cybersecurity Manager and the technical guidance of the Security Engineer, this position collaborates with Information Technology teams, Compliance, managed security service providers, and business stakeholders to protect organizational systems and information assets in alignment with HIPAA, HITRUST, the NIST Cybersecurity Framework, and PCI DSS.

Requirements

Two (2) to four (4) years of direct cybersecurity or information security experience, or four (4) to five (5) years of progressively responsible enterprise Information Technology experience with demonstrated cybersecurity responsibilities.
Experience with enterprise cybersecurity technologies such as endpoint protection, endpoint detection and response (EDR), vulnerability management, identity security, email security, security monitoring, or related security technologies.
Experience supporting Microsoft enterprise technologies, cloud platforms, or hybrid infrastructure environments.
Strong analytical, troubleshooting, documentation, communication, and collaboration skills.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.

Nice To Haves

Experience participating in security investigations, vulnerability remediation, incident response, security monitoring, or other security operations activities preferred.
Experience supporting internal or external security audits, compliance activities, or regulatory frameworks such as HIPAA, HITRUST, the NIST Cybersecurity Framework, or PCI DSS preferred.
Experience working with managed security service providers, third-party security vendors, or security operations partners preferred.
Scripting or automation experience using PowerShell, Python, or similar technologies preferred.
Experience supporting healthcare or another highly regulated industry preferred.
One or more of the following certifications preferred: Security+, CySA+ (CompTIA Cybersecurity Analyst), Microsoft Certified: Security Operations Analyst Associate (SC 200), Microsoft Certified: Identity and Access Administrator Associate (SC-300), GIAC Security Essentials (GSEC) or another relevant GIAC certification, CrowdStrike Certified Falcon Administrator, or other relevant cloud, networking, or cybersecurity vendor certifications.

Responsibilities

Monitors, analyzes, and responds to cybersecurity alerts, events, and incidents by performing initial investigation, triage, documentation, containment activities, escalation, and follow-up in coordination with the Security Engineer and Cybersecurity Manager.
Executes vulnerability management activities by conducting vulnerability assessments, validating findings, evaluating risk and business impact, tracking remediation efforts, coordinating with technology owners, verifying corrective actions, and maintaining accurate vulnerability records and reporting.
Administers and supports enterprise cybersecurity technologies, including endpoint protection, endpoint detection and response (EDR), email security, identity security, vulnerability management, security monitoring, and other cybersecurity platforms under the guidance of the Security Engineer.
Supports cybersecurity governance and compliance activities by assisting with security assessments, audits, evidence collection, policy and procedure documentation, regulatory compliance initiatives, customer security questionnaires, and remediation tracking.
Assists with Identity and Access Management (IAM) security activities by supporting access reviews, privileged access monitoring, identity investigations, authentication security, and identity-related security controls in partnership with Information Technology teams.
Contributes to the organization's cybersecurity training and security awareness program by assisting with phishing simulations, user education initiatives, security communications, awareness campaigns, reporting, and efforts that promote a culture of cybersecurity throughout the organization.
Researches emerging cybersecurity threats, vulnerabilities, attack techniques, and security best practices, recommending operational improvements and contributing to the continuous improvement of Envision Radiology's cybersecurity program.
Collaborates with the Security Engineer, Cybersecurity Manager, managed security service providers, vendors, and Information Technology teams to support incident response, technology implementations, operational projects, cross-training, and knowledge sharing.
Performs other duties as assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.